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DETAILED ACTION 

1 . This action is in response to the communication filed on October 18, 2005. 
Claims 1-22 were originally received for consideration. Per the received preliminary 
amendment, claims 1-22 were cancelled and claims 23-44 are added. 

2. Claims 23-44 are currently pending consideration. 

Information Disclosure Statement 

3. An initialed and dated copy of Applicant's IDS form 1449, received on 
10/18/2005, is attached to this Office action. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

Claims 23-44 are rejected under 35 U.S.C. 102(b) as being anticipated by 
Thomlinson et al. (U.S. Patent 6,044,155). 

Regarding claim 23, Thomlinson discloses: 
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A method for loading an application program into a program memory of a 
microprocessor system having a processor bus that is connected to at least one 
microprocessor; at least one program memory with a boot sector, a flash boot loader, 
an electrically erasable and programmable memory and a read-write memory; and at 
least one system interface; said method comprising: 

producing an authentication code for the application program (column 9, lines 43- 
52, column 16, lines 25-67); 

reading in the authentication code and the current application program, via the 
system interface (column 9, lines 43-52, column 16, lines 25-67); and 

before a read-in current application program is actuated, checking the 
authentication code (column 9, lines 43-52, column 16, lines 25-67); 

wherein, the authentication code is calculated in a secured area by 
concatenating the application program with a first secret data string and calculating a 
hash value from the concatenated application program (column 9, lines 43-52, column 
16, lines 25-67); 

the hash value is read into the microprocessor system, via the system interface, 
as an authentication code (column 9, lines 43-52, column 16, lines 25-67); 

a second, identical, secret data string is stored in the microprocessor system 
(column 9, lines 43-52, column 16, lines 25-67); 

the read-in application program is concatenated with the second secret data 
string in the microprocessor system (column 9, lines 43-52, column 16, lines 25-67); 
and 
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a hash value is calculated by the read-in, concatenated application program in 
the microprocessor and is compared with the transmitted authentication code (column 
17, lines 1-5). 

Claim 24 is rejected as applied above in rejecting claim 23. Furthermore, Thomlinson 
discloses: 

The method as claimed in claim 23, wherein: 

the application program is concatenated with the first secret data string in the 
microprocessor at the start of the program and at the end of the program, both in the 
secured area and during the authenticity checking (column 12, lines 35-47, column 9, 
lines 43-52, column 16, lines 25-67); 

a hash value is calculated using the application program which is concatenated 
at both ends (column 9, lines 43-52, column 16, lines 25-67); and 

the hash value is read in as an authentication code at the system interface 
(column 9, lines 43-52, column 16, lines 25-67). 

Claim 25 is rejected as applied above in rejecting claim 23. Furthermore, Thomlinson 
discloses: 

The method as claimed in claim 23, wherein: 

the application program is initially concatenated with the first secret data string 
either at the start of the program or at the end of the program (column 9, lines 43-52, 
column 16, lines 25-67); 
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in a following step, a first hash value is calculated in the secured area by using 
the application program which is concatenated at one end (column 7, lines 54-59, 
column 9, lines 43-52, column 16, lines 25-67); 

in a subsequent step, the first hash value is concatenated with a first secret data 
string at one end (column 9, lines 43-52, column 16, lines 25-67); 

in a still further step, a second hash value is calculated by the combination of a 
first hash value and the first secret data string, and said second hash value is read in as 
an authentication code at the system interface (column 9, lines 43-52, column 16, lines 
25-67); 

a second, identical, secret data string is stored in the microprocessor system and 
the steps carried out in the secured area are repeated with the original application 
program in the same sequence using said second secret data string in the 
microprocessor (column 9, lines 43-52, column 16, lines 25-67); and 

the hash value which is calculated in the microprocessor is compared with the 
hash value which is read in at the system interface (column 17, lines 1-5). 

Claim 26 is rejected as applied above in rejecting claim 25. Furthermore, Thomlinson 
discloses: 

The method as claimed in claim 25, wherein the authentication code is 
transferred together with the application program (column 9, lines 43-52, column 16, 
lines 25-67). 
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Claim 27 is rejected as applied above in rejecting claim 25. Furthermore, Thomlinson 
discloses: 

The method as claimed in claim 25, wherein the authentication code is 
transferred separately from the application program (column 9, lines 43-52, column 16, 
lines 25-67). 

Claim 28 is rejected as applied above in rejecting claim 27. Furthermore, Thomlinson 
discloses: 

The method as claimed in claim 27, wherein: 

the application program is stored and distributed in a memory medium (column 9, 
lines 43-52, column 16, lines 25-67); and 

the authentication code is transmitted to the system interface from the secured 
area by means of data transmission (column 9, lines 43-52, column 16, lines 25-67). 

Claim 29 is rejected as applied above in rejecting claim 26. Furthermore, Thomlinson 
discloses: 

The method as claimed in claim 26, wherein the application program and the 
authentication code are transmitted to the system interface from the secured area by 
data transmission (column 9, lines 43-52, column 16, lines 25-67) 

Claim 30 is rejected as applied above in rejecting claim 29. Furthermore, Thomlinson 
discloses: 
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The method as claimed in claim 29, wherein the authentication code is read into 
a control unit of a motor vehicle via the diagnostic interface (column 9, lines 43-52, 
column 16, lines 25-67). 

Claim 31 is rejected as applied above in rejecting claim 30. Furthermore, Thomlinson 
discloses: 

The method as claimed in claim 30, wherein if a read-in authentication code and 
a hash value calculated in the microprocessor correspond, the associated application 
program is provided with an identifier as a valid application program (column 9, lines 43- 
52, column 16, lines 25-67). 

Claim 32 is rejected as applied above in rejecting claim 31 . Furthermore, Thomlinson 
discloses: 

The method as claimed in claim 31, wherein flashware meta information is 
included in the authentication code (column 9, lines 43-52, column 16, lines 25-67). 

Claim 33 is rejected as applied above in rejecting claim 32. Furthermore, Thomlinson 
discloses: 

The method as claimed in claim 32, wherein the authentication code is used to 
selectively download the application program into various control units (column 9, lines 
43-52, column 16, lines 25-67). 
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Regarding claim 34, Thomlinson discloses: 

A method for safeguarding authenticity of flashware for a control unit of a motor 
vehicle in which an application program is stored in a program memory; said method 
comprising: 

in a secured area, concatenating the application program with a first secret data 
string, and calculating a hash value using the concatenated application program 
(column 12, lines 35-47, column 9, lines 43-52, column 16, lines 25-67); 

reading the hash value into the control unit as an authentication code (column 9, 
lines 43-52, column 16, lines 25-67); 

storing a second, identical, secret data string in the control unit (column 9, lines 
43-52, column 16, lines 25-67); 

concatenating application program with the second secret data string in the 
control unit (column 9, lines 43-52, column 16, lines 25-67); 

calculating a second hash value using the concatenated application program in 
the control unit (column 9, lines 43-52, column 16, lines 25-67); and 

comparing the calculated second hash value with the transmitted authentication 
code (column 17, lines 1-5). 

Claim 35 is rejected as applied above in rejecting claim 34. Furthermore, Thomlinson 
discloses: 

The method as claimed in claim 34, wherein: 



Application/Control Number: 10/553,599 Page 9 

Art Unit: 2131 

the application program is concatenated with the first secret data string in the 
control unit at the start of the program and at the end of the program, both in the 
secured area and during the authentication checking (column 9, lines 43-52, column 16, 
lines 25-67); 

a hash value is calculated using the application program which is concatenated 
at both ends (column 9, lines 43-52, column 16, lines 25-67); and 

the hash value is read in as an authentication code at the system interface 
(column 9, lines 43-52, column 16, lines 25-67). 

Claim 36 is rejected as applied above in rejecting claim 34. Furthermore, Thomlinson 
discloses: 

The method as claimed in claim 34, wherein: 

the application program is initially concatenated with the first secret data string 
either at the start of the program or at the end of the program (column 9, lines 43-52, 
column 16, lines 25-67); 

in a following step, a first hash value is calculated in the secured area using the 
application program which is concatenated atone end (column 9, lines 43-52, column 
16, lines 25-67); 

in a subsequent step, the first hash value is concatenated with a first secret data 
string at one end (column 9, lines 43-52, column 16, lines 25-67); 

in a still further step, a second hash value is calculated by the combination of a 
first hash value and the first secret data string, and said second hash value is read in as 
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an authentication code at the system interface (column 9, lines 43-52, column 16, lines 
25-67); 

a second, identical, secret data string is stored in the control unit and the steps 
carried out in the secured area are repeated with the original application program in the 
same sequence using said data string in the control unit (column 9, lines 43-52, column 
16, lines 25-67); and 

the hash value which is calculated in the control unit is compared with the hash 
value which is read in at the system interface (column 17, lines 1-5). 

Claim 37 is rejected as applied above in rejecting claim 36. Furthermore, Thomlinson 
discloses: 

The method as claimed in claims 36, wherein the authentication code is 
transferred together with the application program (column 9, lines 43-52, column 16, 
lines 25-67). 

Claim 38 is rejected as applied above in rejecting claim 36. Furthermore, Thomlinson 
discloses: 

The method as claimed in claim 36, wherein the authentication code is 
transferred separately from the application program (column 9, lines 43-52, column 16, 
lines 25-67). 
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Claim 39 is rejected as applied above in rejecting claim 38. Furthermore, Thomlinson 
discloses: 

The method as claimed in claim 38, wherein the application program is stored 
and distributed in a memory medium (column 9, lines 43-52, column 16, lines 25-67); 
and 

the authentication code is transmitted to the system interface from the secured 
area by means of data transmission (column 9, lines 43-52, column 16, lines 25-67). 

Claim 40 is rejected as applied above in rejecting claim 37. Furthermore, Thomlinson 
discloses: 

The method as claimed in claim 37, wherein the application program and the 
authentication code are transmitted to the system interface from the secured area by 
means of data transmission (column 9, lines 43-52, column 1 6, lines 25-67). 

Claim 41 is rejected as applied above in rejecting claim 40. Furthermore, Thomlinson 
discloses: 

The method as claimed in claim 40, wherein the authentication code is read into 
a control unit of a motor vehicle via the diagnostic interface (column 9, lines 43-52, 
column 16, lines 25-67). 

Claim 42 is rejected as applied above in rejecting claim 41 . Furthermore, Thomlinson 
discloses: 



Application/Control Number: 10/553,599 Page 12 

Art Unit: 2131 

The method as claimed in claim 41, wherein if a read-in authentication code and 
a hash value calculated in the control unit correspond, the associated application 
program is provided with an identifier as a valid application program (column 9, lines 43- 
52, column 16, lines 25-67). 

Claim 43 is rejected as applied above in rejecting claim 42. Furthermore, Thomlinson 
discloses: 

The method as claimed in claim 42, wherein flashware meta information is 
included in the authentication code (column 9, lines 43-52, column 16, lines 25-67). 

Claim 44 is rejected as applied above in rejecting claim 43. Furthermore, Thomlinson 
discloses: 

The method as claimed in claim 43, wherein the authentication code is used to 
selectively download the application program into various control units (column 9, lines 
43-52, column 16, lines 25-67). 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to KAVEH ABRISHAMKAR whose telephone number is 
(571)272-3786. The examiner can normally be reached on Monday thru Friday 8-5. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Kaveh Abrishamkar/ 
Examiner, Art Unit 2131 

IK. A./ 
09/02/2008 

Examiner, Art Unit 2131 



